StalkPhish.io - Terms of Service

These Terms of Service ("Terms") govern your access to and use of the StalkPhish.io platform and API ("Service") operated by Thomas Damonneville, micro-entreprise based in France ("we", "us", "StalkPhish"). By accessing or using the Service, you agree to be bound by these Terms.

1. DESCRIPTION OF SERVICE

StalkPhish.io is a Software-as-a-Service (SaaS) platform that provides threat intelligence data related to phishing URLs, brand impersonation, and fraud detection through a REST API. The Service includes access to our database of phishing indicators, search capabilities, and enriched threat data according to your subscription plan.

The Service also includes a Web Search interface accessible without registration (anonymous access), subject to CAPTCHA verification and daily request limits per IP address. Anonymous use of the Web Search interface does not require account creation but is subject to these Terms. Search queries submitted through the Web Search interface may be logged for security, abuse prevention, and operational monitoring purposes. URLs, domains, and IP addresses submitted for search may additionally be subject to automated threat analysis. If identified as malicious, they may be incorporated into our threat intelligence database and made available through the Service.

2. ACCOUNT REGISTRATION

To use the Service, you must create an account and provide accurate, complete information. You are responsible for maintaining the confidentiality of your account credentials and API key. You must immediately notify us of any unauthorized use of your account at contact~at~stalkphish.com.

You must be at least 18 years old to use the Service. By creating an account, you represent that you have the legal capacity to enter into these Terms.

3. SUBSCRIPTION PLANS AND PRICING

The Service is available through several subscription plans with varying features, API request limits, data access and pricing, as described on our Pricing page or, for plans not offered for self-service purchase, in a separate written order form or agreement. We may add, rename, modify or withdraw plans at any time; such changes do not affect the plan you have already paid for before the end of your current billing period.

Prices are stated in Euros (€) and are exclusive of applicable taxes. We reserve the right to modify our pricing at any time. Price changes will take effect at the start of your next billing cycle and will be notified to you at least thirty (30) days in advance. If you do not accept a price change, you may cancel your subscription before it takes effect, in accordance with Section 6.

4. FREE TRIAL

Paid subscription plans may include a free trial. Its duration and conditions depend on the plan and on the offer under which it is granted, and are stated to you when the trial starts. Unless stated otherwise, the trial lasts 7 days and a valid payment method (credit card) is required to start it.

Free trials are limited to one per customer. At the end of the trial period, you will receive a notification regarding payment. If payment is not completed, your account will automatically revert to the Free plan with its associated limitations.

5. PAYMENT AND BILLING

Paid subscriptions are billed in advance on a monthly or annual basis, depending on your chosen billing cycle. Payments are processed securely through Stripe. By subscribing to a paid plan, you authorize us to charge your payment method for the recurring subscription fees.

Subscriptions renew automatically at the end of each billing period unless cancelled before the renewal date. You are responsible for ensuring your payment information is current and valid.

6. CANCELLATION AND REFUNDS

You may cancel your subscription at any time through your account settings. Cancellation will take effect at the end of the current billing period. You will retain access to paid features until the end of the period you have already paid for.

No refunds will be provided for partial subscription periods or unused portions of your subscription. After cancellation, your account will revert to the Free plan.

7. RIGHT OF WITHDRAWAL (CONSUMERS)

If you are a consumer (individual acting outside of your professional activity) located in the European Union, you have the right to withdraw from your subscription within 14 days of purchase without giving any reason.

To exercise this right, you must inform us of your decision by sending an email to contact~at~stalkphish.com with a clear statement of your withdrawal. Upon valid withdrawal, we will reimburse you using the same payment method used for the initial transaction, within 14 days.

Note: If you have actively used the Service during the withdrawal period, we may deduct a proportionate amount corresponding to the Service provided up to the time of withdrawal.

8. ACCEPTABLE USE

You agree to use the Service only for lawful purposes and in accordance with these Terms. You shall not:

• Use the Service for any illegal activity or to facilitate illegal activities by third parties
• Attempt to gain unauthorized access to the Service, other accounts, or related systems
• Reverse engineer, decompile, or attempt to extract the source code of the Service
• Exceed your plan's API rate limits or attempt to circumvent usage restrictions
• Use automated means to create multiple accounts to bypass limitations
• Interfere with or disrupt the integrity or performance of the Service
• Use the Service in a manner that could damage, disable, or impair the Service
• Attempt to circumvent anonymous access restrictions, including by any technical means, to bypass daily search quotas
• Use the Web Search interface for any purpose other than defensive security, threat intelligence, or fraud investigation

9. DATA USAGE AND RESTRICTIONS

The data provided through the Service (the "Data") is licensed, not sold, to you, for use within your own organisation and for your own security operations only. You may not:

• Resell, redistribute, sublicense, publish or otherwise commercially share the Data
• Incorporate the Data, or any substantial part of it, into any product, service, feed, dataset or database made available to third parties, whether in original, derived, enriched or aggregated form, and whether or not the Data is combined with other sources
• Systematically extract, download, index, cache or otherwise reproduce the Data, or any substantial part of it, beyond what is necessary for your own internal use, including by automated enumeration of the API outside of normal lookup use
• Provide third parties with access to the Data or to your API credentials
• Use the Data to build or train any product, model or service offered to third parties

Permitted operational use: Nothing in this Section prevents you from using individual indicators obtained from the Service in the ordinary course of your own security operations — including in incident reports, alerts, takedown requests and notifications to affected parties — provided such use is incidental and does not amount to redistribution of the Data or of a substantial part of it.

Search queries submitted through the Web Search interface are for lookup purposes only. You acknowledge that the presence or absence of a URL, domain, or IP address in our database does not constitute a definitive determination of malicious or legitimate intent.

Analysis of submitted search queries: By using the Web Search interface, you acknowledge that URLs, domains, and IP addresses you submit may be automatically analyzed as potential threat indicators. If a submitted indicator is determined to be related to phishing or fraud activity, it may be incorporated into our threat intelligence database. No personal data associated with your account or identity is linked to the submitted indicators in this process.

MSSP, reseller and partner use: If you are a Managed Security Service Provider (MSSP), reseller, intelligence vendor or integrator, or if you wish to incorporate StalkPhish.io Data into any product or service provided to your own customers, you must contact us at contact~at~stalkphish.com to obtain a separate written partnership or redistribution licence. Use beyond the scope of these Terms without such a licence is a material breach of these Terms.

Verification and enforcement: We may monitor API usage patterns to detect systematic extraction. Where access constitutes, in our reasonable assessment, systematic extraction or redistribution, we may rate-limit or suspend it in accordance with Section 15.

10. ACCEPTABLE USE OF EXFILTRATION INDICATORS

Part of the Data exposes operational details of phishing infrastructure, including Telegram bot tokens and bot identifiers, chat and channel identifiers, exfiltration email addresses, and credentials or endpoints embedded in phishing kits ("Exfiltration Indicators").

Exfiltration Indicators are provided for detection, attribution, investigation, reporting and takedown purposes only. You may not use them to access, authenticate to, interact with, send data to, disrupt, or extract data from any system, account, bot, channel or service, unless you are expressly authorised to do so by law or by the lawful owner of that system.

You are solely responsible for ensuring that your use of Exfiltration Indicators complies with the laws applicable to you, including laws on unauthorised access to computer systems. We supply these indicators as observed artefacts of malicious infrastructure and grant no authorisation, express or implied, to interact with any third-party system.

11. INTELLECTUAL PROPERTY

The Service, including its original content, features, functionality, and underlying technology, is owned by StalkPhish and is protected by French and international intellectual property laws.

Your subscription grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Service in accordance with these Terms. This license does not include any right to the underlying data structures, algorithms, or source code.

12. DISCLAIMER OF WARRANTIES

The Service is provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

Data Accuracy: While we strive to provide accurate and up-to-date threat intelligence, we do not warrant or guarantee the accuracy, completeness, reliability, or timeliness of the data provided. The data may contain false positives (legitimate sites incorrectly flagged) or false negatives (malicious sites not detected). You acknowledge that threat intelligence data is inherently dynamic and that no detection system is infallible.

You are solely responsible for evaluating the data and making your own decisions based on your analysis. The Service should be used as one component of a comprehensive security strategy, not as the sole basis for security decisions.

13. LIMITATION OF LIABILITY

To the maximum extent permitted by applicable law, StalkPhish shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill, arising out of or related to your use of the Service.

In any event, our total liability to you for all claims arising from or related to the Service shall not exceed the amount paid by you for the current monthly subscription period.

These limitations apply regardless of the legal theory on which the claim is based, whether in contract, tort (including negligence), strict liability, or otherwise, and even if StalkPhish has been advised of the possibility of such damages.

14. SERVICE AVAILABILITY

We strive to maintain high availability of the Service but do not guarantee uninterrupted or error-free operation. The Service is provided on a "best effort" basis.

Scheduled Maintenance: When possible, planned maintenance windows will be announced in advance via email or through your account dashboard. We aim to schedule maintenance during low-traffic periods to minimize disruption.

Unscheduled Downtime: The Service may experience unplanned interruptions due to technical issues, security incidents, third-party service failures, or circumstances beyond our control (force majeure). We will make reasonable efforts to restore the Service as quickly as possible.

No Compensation: Service unavailability, whether scheduled or unscheduled, does not entitle you to any refund, credit, or compensation. We recommend that you do not rely on the Service as your sole source of threat intelligence.

We reserve the right to modify, suspend, or discontinue any part of the Service at any time. For significant changes affecting core functionality, we will make reasonable efforts to provide advance notice.

15. ACCOUNT SUSPENSION AND TERMINATION

We reserve the right to suspend or terminate your account and access to the Service, with one week's prior notice when possible, in the following circumstances:

• Violation of these Terms or any applicable laws
• Abusive behavior, including excessive API usage designed to circumvent limits
• Non-payment of subscription fees
• Use of the Service for illegal purposes
• Upon your request

In cases of severe abuse or illegal activity, we may suspend your account immediately without prior notice. Upon termination, your right to use the Service will immediately cease, and we may delete your account data in accordance with our Privacy Policy.

16. INDEMNIFICATION

You agree to indemnify, defend, and hold harmless StalkPhish and its owner from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in any way connected with your access to or use of the Service, your violation of these Terms, or your violation of any third-party rights.

17. MODIFICATIONS TO TERMS

We reserve the right to modify these Terms at any time. Any changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after such modifications constitutes your acceptance of the revised Terms.

For material changes that significantly affect your rights, we will make reasonable efforts to notify you via email or through the Service.

18. GOVERNING LAW AND JURISDICTION

These Terms shall be governed by and construed in accordance with the laws of France, without regard to its conflict of law provisions.

Any dispute arising out of or relating to these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of Paris, France, unless otherwise required by applicable consumer protection laws.

19. SEVERABILITY

If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.

20. ENTIRE AGREEMENT

These Terms, together with the Privacy Policy and any other legal notices published on the Service, constitute the entire agreement between you and StalkPhish regarding the use of the Service and supersede any prior agreements.

Where you and StalkPhish have entered into a separate written agreement — including an order form, partnership agreement, redistribution licence or data-sharing agreement — that agreement prevails over these Terms to the extent of any conflict, for the subject matter it covers. These Terms continue to apply to everything that separate agreement does not address.

No purchase order, general conditions of purchase, or other document issued by you varies these Terms, whatever its content, unless we have expressly accepted it in writing.

21. CONTACT

For any questions about these Terms of Service, please contact us at: contact~at~stalkphish.com